KaifAhmad1andClaude Sonnet 4.6 6390138edc fix(codeql): remove 403-failing disable step; dismiss fixed alerts via API ...

GITHUB_TOKEN cannot change Default Setup (requires admin rights — HTTP 403).
Removed the disable-default-setup job entirely.

New approach:
- analyze job: runs CodeQL with upload:false then uploads SARIF via
  upload-sarif with continue-on-error:true so the workflow does not fail
  if Default Setup is still active
- dismiss-fixed-alerts job: runs on push to main, fetches all open alerts
  matching the 3 fixed rule IDs and dismisses them via PATCH API which
  only requires security-events:write (no admin needed)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-30 20:17:18 +05:30

..

benchmark.yml

fix(security): resolve CodeQL alerts for logging, URL sanitization, and workflow permissions

2026-03-30 19:46:30 +05:30

ci.yml

ci: remove test step — rely on benchmark and security workflows only

2026-03-18 01:10:13 +05:30

codeql.yml

fix(codeql): remove 403-failing disable step; dismiss fixed alerts via API

2026-03-30 20:17:18 +05:30

docs.yml

ci(deps): bump actions/deploy-pages from 4 to 5 (#423)

2026-03-30 15:44:31 +05:30

release.yml

Use Trusted Publishing for PyPI deployment (more secure)

2025-11-26 12:06:48 +05:30

security-scan.yml

fix: address Qodo review issues in CI workflows

2026-03-18 00:38:44 +05:30

security.yml

fix(security): resolve CodeQL alerts for logging, URL sanitization, and workflow permissions

2026-03-30 19:46:30 +05:30